NCUTC Deadline Sept. 29: Part 107 Still Required for C-UAS Mitigation

By Robert Rahm

September 29 is a training date, not a new flight rule. Treat it that way.

The Department of Justice and the Department of Homeland Security published the SAFER SKIES Act interim final rule on July 6, 2026. The text was already effective July 1. It is coded twice, word for word: 6 CFR part 124 and 28 CFR part 124. The Act itself sat in the FY26 National Defense Authorization Act and was signed December 18, 2025.

What changed on July 1 is authority, not Part 107. Accredited state, local, Tribal, and territorial law-enforcement and correctional agencies can now detect, identify, monitor, track, and — if the people and the gear match the rule — mitigate a drone under the agency’s own power. Federal deputization onto a task force is no longer the only path.

What did not change is the certificate on the person who executes a mitigation. The Police Executive Research Forum’s September 2026 malicious-drone report states the requirement in one sentence: a person executing a mitigation operation must hold a current FAA Part 107 remote pilot certificate. The NCUTC course does not issue that card. It does not teach you to fly. PERF is explicit that attendees are expected to arrive with unmanned-aircraft skills.

The September 29 clock

28 CFR 124.5(n) is the line that matters this week. Personnel who hold a Mitigation Certification issued by the FBI’s National Counter-UAS Training Center before July 1, 2026 must complete the Detection and Warning curriculum by September 29, 2026. Until that date the Mitigation Certification remains valid, and the Detection and Warning prerequisite is treated as satisfied. An agency’s accreditation is not pulled while those officers finish the course.

After September 29, that grace period ends. The online Detection and Warning certification becomes the standing prerequisite for new mitigation enrollment and for mitigation recertification.

Detection and Warning is not the two-week schoolhouse. The IFR put that tier on an NCUTC online portal that issues the certificate on completion. Mitigation stays at the resident schoolhouse in Huntsville. PERF describes an 80-hour, two-week course, about sixteen students, a 4-to-1 instructor ratio. The center is the sole certifying authority for SLTT mitigation under the Act.

When the IFR was written, NCUTC records showed about 61 individually certified officers from about 46 agencies. The Departments said they expect roughly 1,500 agencies to reach the detection tier within two years. Those are federal planning numbers, not a roster of accredited departments on your beat. Ask the agency in front of you for its accreditation status. Do not infer it from a press release.

What a Part 107 contractor should do with this

You do not get C-UAS authority by reading the rule. You also do not lose the right to fly a lawful job because a nearby department finished Huntsville.

What you should change is the preflight brief when the client is a stadium, a prison, a plant, a hospital campus, or a city running drone-as-first-responder.

1. Ask whether the agency is SAFER SKIES-accredited and whether any officer on the detail holds a current Mitigation Certificate plus a current Part 107. If the answer is fuzzy, write that down. Fly the job you were hired for. Do not fill the gap.
2. Confirm the airspace product you will actually use — TFR, LAANC grid, stadium restriction, or nothing published — and keep a screenshot in the mission file. Local C-UAS authority does not replace FAA airspace.
3. If you are the public-safety pilot, keep the 107 current. Recurrent ALC-677 (or the then-current course) every 24 calendar months is still the FAA clock. The NCUTC card does not substitute.
4. If a client asks you to “handle” an unknown drone over the site, stop. Detection systems that do not need the Act’s legal relief can be a different conversation. Mitigation — disable, seize control, take the aircraft down — is a certified SLTT function on listed equipment, with FAA coordination and a report to DOJ and DHS within 48 hours. Crowell’s July 20 read of the IFR also flags ATC notification within five minutes after a mitigation system is activated. That is not contractor work.
5. Price the new friction. More accredited agencies means more lawful intercept next to commercial flights near events and critical sites. Build extra hold time into the quote when the site sits under a recurring TFR or a fixed-site petition under the still-proposed Section 2209 / Part 74 process.

What this is not

It is not a ban on commercial drones. Already-authorized aircraft remain legal to fly under Part 107, TRUST, or the operator’s other FAA authority.

It is not permission for a city to jam from a parking lot without the rest of the stack: agency policy, legal review, portal attestation, listed technology, certified people, FAA coordination.

It is not a change to Remote ID, LAANC, or the still-pending Part 108 BVLOS rule.

Civil exposure in the Act is aimed at the agency and the people who mitigate outside the box — Crowell and the IFR both cite a civil fine of up to $100,000 per violation, plus possible suspension of C-UAS authority. That is a reason for a department to finish the September 29 course. It is not a new ticket schedule for a roof inspector who stayed out of the TFR.

Public-safety work that is still on the table

Agencies that want their own eyes in the air still need pilots. DFR, search, fire mapping, and disaster assessment remain Part 107 or public-aircraft work. The September 29 deadline is a filter on the counter-drone side of the same shop. A contractor who can show a clean 107, a written operations manual, and a habit of checking TFRs before launch is easier to put on a joint scene than one who treats C-UAS as folklore.

The comment window on the IFR closed September 4. The rule is already running. The only date left on the transition paragraph is tomorrow.